Jennie Robinson Faber 6527bbbe4e test(api): cover free-signup → subscription bridge-cookie hand-off ... Two tests guarding the regression where /api/helcim/customer skipped setPaymentBridgeCookie for $0 signups and left the user unable to complete activation. Second test confirms the auth gate on /api/helcim/subscription still rejects fresh unauthenticated calls.		2026-04-29 21:00:27 +01:00
..
api	test(api): cover free-signup → subscription bridge-cookie hand-off	2026-04-29 21:00:27 +01:00
config	feat(launch): security and correctness fixes for 2026-05-01 launch	2026-04-25 18:42:36 +01:00
helpers	Add Vitest security test suite and update security evaluation doc	2026-03-01 12:30:06 +00:00
middleware	refactor(rate-limit): delegate auth limiting to handlers, add dev bypass	2026-04-27 19:18:34 +01:00
models	chore(slack): remove dead invite path, archive checkSlackJoins poller	2026-04-29 12:34:21 +01:00
utils	chore(slack): remove dead invite path, archive checkSlackJoins poller	2026-04-29 12:34:21 +01:00
setup.js	feat(activation): wire autoFlagPreExistingSlackAccess into self-serve paths	2026-04-29 12:21:12 +01:00